hi folks - long time no see. is file integrity monitoring in osquery 5 using the endpoint security framework or is it still using FSEvents?

It's still using FSEvents

Adding Endpoint Security as a new publisher of file events is not currently being worked on, but ought to be relatively easy now